LeastPrivilegedMSGraph

Author(s)

• Morten Mynster

Functions

Assert-LPMSGraph Export-PermissionAnalysisReport Get-AppActivityData Get-AppRoleAssignment Get-AppThrottlingData Get-PermissionAnalysis Initialize-LogAnalyticsApi Invoke-LPMSGraphScan

Dependencies

• • EntraAuth
  • PSFramework

Release Notes

## [1.1.0] - 2025-12-19

### Added
- **New Cmdlets:**
 - `Assert-LPMSGraph` - Validates all prerequisites before running analysis (EntraAuth connectivity, workspace configuration, required modules)
 - `Invoke-LPMSGraphScan` - Single orchestration command that executes the complete least privilege analysis workflow
   - Supports both workspace ID and detailed workspace parameters (subscription, resource group, workspace name)
   - Includes optional throttling data collection
   - Automatically chains all analysis steps: role assignments > activity data > throttling data > permission analysis > report generation
- **User Context Support:**
 - Module now supports delegated (user) authentication context in addition to app-only (service principal) authentication
 - Enhanced flexibility for different authentication scenarios and permission models


### Acknowledgments
Thanks to Jos Lieben (jflieben) for the suggestion